Day 2 Operations on Google Cloud
Contact us to book this courseApplication Modernization
On-Site, Virtual
2 days
The large majority of customers on Google Cloud have migrated using a “lift and shift” strategy to simply move their applications to Google Cloud. They often are using the console to manage their systems operations and hosting their applications on a self-managed fleet of Compute Engine virtual machines.
This course uses the example of a simple 3-tier web application which has recently been migrated to virtual machines on Google Cloud. You will walk through the process of modernizing this application by implementing logging and monitoring using Cloud Operations, tightening security policies by using custom service accounts, leveraging tagging for managing and cataloging resources, enforcing compliance policies at the project and organization level, managing OS images and patching for their virtual machines, and automating deployment of infrastructure using Terraform. Finally, you will walk through the process of migrating your application to a Google Kubernetes Engine cluster while following best practices and minimizing downtime for your currently running applications.
Objectives
- Understand the pillars of the Google Cloud Architecture Framework, focusing on the pillar of Operational Excellence
- Implement logging and monitoring for your applications following Google Cloud best practices
- Follow the principle of least privilege by replacing default service accounts with purpose-built service accounts for your application Create project-level and organization-level polices to enforce compliance with company policies
- Manage and patch OS images and enforce compliance using VM Manager
- Automate deployment of infrastructure using tools such as Terraform
- Prepare and migrate your application to managed services such as Google Kubernetes Engine
- Learn more about next steps to continue modernizing your applications using cloud native technologies
Audience
SysOps professionals looking to implement best practices to modernize the infrastructure powering their applications.
Prerequisites
Students should have completed the “Google Cloud Fundamentals: Core Infrastructure” and “Architecting with Google Compute Engine” courses or have equivalent Google Cloud experience. Familiarity with shell scripting in Linux and containers is also recommended.
Course outline
- Introduction to the Google Cloud Architecture Framework
- Operational Excellence
- Exploring Your Use Case: 3-Tier Web Application
- The Four Golden Signals
- Setting Up the Cloud Logging Agent
- Querying Logs in Cloud Logging
- Making Logs Actionable with Cloud Monitoring
- Alerting Policies
- Why to Not Use the Default Service Accounts
- Creating Service Accounts and Custom IAM roles
- Policies and Tags for Resources
- IAM Conditions and Tags
- Project and Organization-Level Policies
- Introduction to VM Manager
- OS Configurations and Policies
- OS Inventory and Patch Management
- Enforcing Compliance Policies
- Database Options and Considerations
- Preparing to Migrate Your Database
- Database Migration Service
- CDC and Migrating Your Application to the New Database
- Why Automation?
- Introduction to Terraform
- Preparing Current Configuration for Automation
- Best Practices for Automating Deployment of Resources
- Ensuring Your VM-based Application Is Ready for Migration
- Planning for Migrating the Application Without Downtime
- GKE Operation Modes
- Migrating the Application
- Logging and Monitoring for GKE
- Optimizing Cluster Performance
- Managing IP Allocation
- Troubleshooting Performance
- Summary of Journey
- Summary of Best Practices
- Next Steps to Continue Infrastructure Modernization